For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Hoang_Hung's avatar
Hoang_Hung
Icon for Cirrus rankCirrus
Aug 25, 2020

WAF Event Log on BIG-IQ not Real - Time

Hi all We have BIG-IQ system. But At this time WAF event log on BIG-IQ not real -time We have check event log on BIG-IP Device all ok. But on BIG-IQ not real -time Plz help me BIG-IQ: Time: Last ...
ASM Advanced WAF
BIG-IQ
security
Ivan_Chernenkii's avatar
Ivan_Chernenkii
Icon for Employee rankEmployee
Aug 25, 2020

Hello Hoang,

 

Do you have different time for the same "Support ID"?

Do you configure dns and ntp on BIG-IP and BIG-IQ?

 

Thanks, Ivan

Hoang_Hung's avatar
Hoang_Hung
Icon for Cirrus rankCirrus
Aug 26, 2020

Hi  

Thanks you so much.

We have configuration DNS and NTP on BIG-IQ and BIG-IP.

But I done know " Do you have different time for the same "Support ID"?" What is Support ID ?

 

Thanks

Hung Hoang

  • Ivan_Chernenkii's avatar
    Ivan_Chernenkii
    Icon for Employee rankEmployee
    Aug 26, 2020

    For each request, which is logged on BIG-IP/BIG-IQ you have Support ID (id of logged request).

    On your screenshot from BIG-IQ it is mentioned in "Support ID" column.

    On BIG-IP it could be seen in "All Details" of selected request, also you can use filer to find needed one.

  • Hoang_Hung's avatar
    Hoang_Hung
    Icon for Cirrus rankCirrus
    Aug 27, 2020

    Hi  

    Thanks you.

    I have check and at this time on BIG-IP i cann't find all log befor Jul,21,2020.

    On BIG-IQ we only check log only day Jul,21,2020.

     I have check. event log WAF on BIG-IQ ( depend on other policy WAF). At this time policy it dont have on BIG-IP.

     

    Thanks

    Hung Hoang